Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20063/cm567FiJieC_1ORP0-2f0r3OQWA.roa
File:                     cm567FiJieC_1ORP0-2f0r3OQWA.roa (raw, json)
Hash identifier:          12Ec6ntZ8stPt0sFBFAzrwuVSESqOTf+1ZOCLWtyUUE=
Subject key identifier:   72:6E:7A:EC:58:89:89:E0:BF:D4:E4:4F:D3:ED:9F:D2:BD:CE:41:60
Certificate issuer:       /CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
Certificate serial:       71
Authority key identifier: 9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/cm567FiJieC_1ORP0-2f0r3OQWA.roa
Signing time:             Thu 22 Jun 2023 00:36:58 +0000
ROA not before:           Thu 22 Jun 2023 00:36:58 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     24277
IP address blocks:        122.128.118.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 22 Jun 2023 00:43:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113 (0x71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
        Validity
            Not Before: Jun 22 00:36:58 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=726E7AEC588989E0BFD4E44FD3ED9FD2BDCE4160
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9c:b7:d6:d2:95:92:6c:ec:ad:d1:a0:be:0a:
                    82:b4:bc:17:18:f9:7a:15:2b:ad:e1:8d:c0:dc:c4:
                    bb:6f:b8:a2:02:f2:59:1d:fd:c7:7b:8f:de:51:29:
                    6c:78:1a:e9:19:66:9d:2e:e1:b2:65:b2:9a:5f:41:
                    a3:cc:1f:d0:37:fe:56:60:03:45:f6:22:ac:a9:27:
                    6c:e1:b3:27:8a:34:42:90:20:1f:d1:8f:83:1c:0e:
                    ec:00:34:1b:be:c3:4c:1c:bc:09:dc:45:9e:c9:c9:
                    8b:74:c3:1c:9d:9d:08:9a:ad:17:b1:a6:df:6b:66:
                    a1:4e:fc:4a:5d:f7:d8:9e:a0:de:58:b6:34:e9:9a:
                    90:a9:0f:0b:47:ba:f0:b1:e4:e0:34:56:59:6d:31:
                    09:e0:2e:bb:54:e1:ad:5d:df:16:1c:6b:78:39:a8:
                    c1:fb:70:a7:44:49:7e:d7:6e:9c:4f:86:f7:9f:a0:
                    e8:94:cf:df:a4:5a:70:53:d5:20:9d:f6:ad:15:f1:
                    80:10:c0:2a:6f:3d:7d:da:74:98:23:94:d9:18:27:
                    6d:ca:26:b2:8b:85:8f:a2:82:89:23:16:72:db:5f:
                    00:ca:1b:1c:d1:8a:33:ad:3c:85:61:d9:20:c9:9c:
                    92:85:9a:0d:fb:63:82:42:1d:e3:f6:0a:78:6c:be:
                    e0:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:6E:7A:EC:58:89:89:E0:BF:D4:E4:4F:D3:ED:9F:D2:BD:CE:41:60
            X509v3 Authority Key Identifier:
                keyid:9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/nbB2TG38Hj32vVgOpplKHnCY9So.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/cm567FiJieC_1ORP0-2f0r3OQWA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.128.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:40:d3:c0:f7:5f:7e:1e:cd:3c:a3:ed:54:f0:e9:85:0e:bc:
         3d:b0:d7:60:59:9f:08:45:dd:32:8f:f4:59:d4:71:47:d9:c8:
         29:08:3f:c3:a3:f3:8b:b2:a7:76:ac:d5:c9:79:ef:e6:28:47:
         59:34:5e:85:d8:77:19:82:b4:76:b7:08:53:74:3c:7d:b5:17:
         f7:24:63:41:4c:e8:df:ec:b8:67:d3:6b:ee:8c:3e:53:9b:1c:
         cb:71:e2:6a:fa:c7:66:e8:c4:c3:a0:9f:fb:0a:72:22:7c:df:
         5e:f1:ad:a6:52:49:38:4e:26:3d:c7:19:aa:a0:74:f4:be:5f:
         70:46:ac:ad:5b:71:08:fe:a2:a6:e8:d4:7f:37:8a:5e:a3:6f:
         1a:f6:f4:69:c4:52:e4:4e:46:df:d2:b2:cb:23:6a:13:59:7f:
         9d:96:6c:e3:fe:49:87:15:25:30:9c:61:f4:fb:e6:35:4e:3a:
         81:74:15:23:46:19:2a:18:5b:f9:12:3a:c9:cc:5d:e4:53:5f:
         e8:d1:8d:bc:bd:34:f8:20:b7:be:da:ca:39:7d:ca:9f:2b:f1:
         6e:c2:96:0d:d6:d5:ae:e1:7f:c8:a7:15:e2:6a:96:8a:3e:ac:
         d5:07:64:73:89:a0:01:15:77:5e:fe:dc:25:5b:e8:fa:3e:9e:
         c8:39:b4:94
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBcTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5REIw
NzY0QzZERkMxRTNERjZCRDU4MEVBNjk5NEExRTcwOThGNTJBMB4XDTIzMDYyMjAw
MzY1OFoXDTI0MDYxNDAxMzAwMlowMzExMC8GA1UEAxMoNzI2RTdBRUM1ODg5ODlF
MEJGRDRFNDRGRDNFRDlGRDJCRENFNDE2MDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKyct9bSlZJs7K3RoL4KgrS8Fxj5ehUrreGNwNzEu2+4ogLyWR39
x3uP3lEpbHga6RlmnS7hsmWyml9Bo8wf0Df+VmADRfYirKknbOGzJ4o0QpAgH9GP
gxwO7AA0G77DTBy8CdxFnsnJi3TDHJ2dCJqtF7Gm32tmoU78Sl332J6g3li2NOma
kKkPC0e68LHk4DRWWW0xCeAuu1ThrV3fFhxreDmowftwp0RJftdunE+G95+g6JTP
36RacFPVIJ32rRXxgBDAKm89fdp0mCOU2RgnbcomsouFj6KCiSMWcttfAMobHNGK
M608hWHZIMmckoWaDftjgkId4/YKeGy+4PsCAwEAAaOCAigwggIkMB0GA1UdDgQW
BBRybnrsWImJ4L/U5E/T7Z/Svc5BYDAfBgNVHSMEGDAWgBSdsHZMbfwePfa9WA6m
mUoecJj1KjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAwNjMvbmJCMlRHMzhIajMydlZnT3BwbEtIbkNZOVNvLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvbmJCMlRHMzhIajMydlZnT3BwbEtI
bkNZOVNvLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIwMDYzL2NtNTY3RmlKaWVDXzFPUlAwLTJmMHIzT1FXQS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAB6gHYwDQYJKoZIhvcNAQELBQADggEBACpA08D3X34ezTyj7VTw6YUO
vD2w12BZnwhF3TKP9FnUcUfZyCkIP8Oj84uyp3as1cl57+YoR1k0XoXYdxmCtHa3
CFN0PH21F/ckY0FM6N/suGfTa+6MPlObHMtx4mr6x2boxMOgn/sKciJ8317xraZS
SThOJj3HGaqgdPS+X3BGrK1bcQj+oqbo1H83il6jbxr29GnEUuRORt/SsssjahNZ
f52WbOP+SYcVJTCcYfT75jVOOoF0FSNGGSoYW/kSOsnMXeRTX+jRjby9NPggt77a
yjl9yp8r8W7Clg3W1a7hf8inFeJqloo+rNUHZHOJoAEVd17+3CVb6Po+nsg5tJQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:44 2024 by rpki-client on console-fra.rpki-client.org